Privacy Policy

Qynko is operated by Procellence Technology, a sole proprietorship in West Bengal, India (proprietor: Mou Das Duya; GSTIN 19HKNPD4604R1ZF). For the personal data described in this policy, we are the Data Fiduciary under the Digital Personal Data Protection Act, 2023.

This policy covers creators who use Qynko, visitors to qynko.com, and buyers who purchase from a creator's storefront. A creator's storefront may also show the creator's own privacy notice; that notice explains how the creator uses your details, and this policy, including the section For Buyers, explains how Qynko processes them.

• Account and profile data: Your name, email address, phone number, profile photo, bio, experience, niche, what you tell us you want to use Qynko for, languages, social links, and the content of your storefront.
• KYC and payout data: Your legal name, PAN, an image of your PAN card, a selfie holding your PAN card, your payout account details (bank account number and IFSC), the name registered on that account, an image of a cancelled cheque or bank statement, and optional business details such as business name, GSTIN, the business address registered on that GSTIN and business proof documents. You may also add or change a GSTIN, with its business name and registered address, after your identity is verified. Once a GSTIN is approved, it, your legal name and that address are printed on the GST tax invoices Qynko issues to you and reported in Qynko's GST returns. Documents you send us may be uploaded to your KYC record by our team. If a verification call is needed, we keep a recording (only with your consent) or written notes.
• Content data: Courses, videos, recordings, digital products, community posts, pages and other material you upload or create, with their titles, descriptions and prices.
• Buyer and contact data you manage: Details of your buyers, of the people who download your free resources (lead magnets), of people who sign up for updates on your store page, and of contacts you import, with the consent each gave and the messages you send them through Qynko. Contacts collected beyond your plan's contact limit are stored and stay locked until your plan covers them.
• AI data: Your Qynko Manager conversations and the inputs you give to AI features, and the output they generate.
• Transaction data: Sales, commission, refunds, disputes, withdrawals, plan purchases and invoices.
• Custom domain data: If you buy a custom domain, the domain name, its type (main domain or subdomain), the DNS records you need to add and the results of our checks on them, which company runs its DNS (read from its public name servers), the domains you change from and to, its connection and renewal status, payments and invoices, and notes our team adds while setting it up. Your live domain is also shown publicly as your storefront's address.
• Managed Ads and Own App data: If you buy Managed Ads or Own App, the monthly ad budget you choose, the ad platforms you approve, whether your ad accounts and tracking are already set up, the approved GSTIN and legal business name that your invoice carries, the coupon you used, your payments and invoices, and the status of the work.
• Usage and device data: Pages visited, features used, clicks and session recordings (with form inputs masked), and your IP address, browser, operating system and device type.
• Security logs: Where we record them, the IP address, device and browser details and time of sign-ins, payout-account changes, withdrawals, KYC actions and purchases.
• Attribution data: How you found Qynko, including the Qynko landing page you came from, ad-click identifiers and campaign parameters (such as gclid, fbclid and utm parameters), which we store with your account.
• Integration data: Data from services you connect, such as your Instagram account, Telegram community and Google Calendar.
• Support data: Messages and attachments you send to our support team.
• Enquiry form data: If you fill in an enquiry form on a Qynko page, we collect your name and WhatsApp number, plus what that form asks: on the Managed Ads page, your Instagram username, follower range and monthly ad spend; on the Own App page, what you teach and how many students you have; on the Pricing page's Scale plan form, your monthly sales and an optional note. We also record the page you sent it from and the ad or link that brought you there. Our team uses them to reply to you about that service.

We use Google Firebase Authentication to sign you in, including by one-time password (OTP) to your phone and by Google sign-in. Firebase processes your phone number or Google account details and device information for this. We receive the verification result and a secure sign-in token; we do not store your OTP.

• We collect KYC data only to verify your identity before paying you once your total earnings pass ₹5,000 (or earlier, if you choose to verify), to meet tax and legal obligations, and to prevent fraud.
• KYC documents are stored with restricted access and are available only to authorised Qynko staff who review them.
• If we ask for a verification call, we keep the time and meeting link we share and any times or note you send us to reschedule it.
• If a submission is rejected and you submit again, we keep the earlier submission and its documents with your KYC record, so our team can review your full verification history if an issue comes up.
• Your payout account details are stored in full, because we need them to pay you. Access to them is restricted to authorised staff and the systems that process payouts. When you change your payout account, we send a one-time code to your registered mobile number to confirm it is you.
• We compare the name on your payout account with your PAN, and check whether your PAN or payout account is linked to another account.
• We do not collect your Aadhaar number.

We may record your IP address, device and browser details and the time of sensitive actions: sign-up and sign-in, changes to your payout account, withdrawals, KYC submissions and decisions, and purchases. We use these logs only for security, fraud prevention and investigations, and to respond to lawful requests. They are not shown to other creators or buyers.

• When you use Qynko Manager or AI generation, your inputs and relevant account context are sent to our AI providers (OpenAI, Anthropic and Google Gemini) to produce a response.
• To suggest your next steps, Qynko Manager reads how your account is set up: your plan and what is left on it, your published services, lead forms, coupons, campaigns, whether Instagram is connected, your availability and any Growth Review booking. It can prepare a coupon, a campaign, an Instagram automation or a lead form for you, but nothing is created until you press Confirm. A campaign is saved as a draft and an automation is saved switched off, so nothing is sent until you send it or turn it on yourself.
• We store your Qynko Manager conversations and AI inputs and outputs so that you can see your history and we can improve responses.
• The API terms of OpenAI and Anthropic do not permit them to train their models on the data we send them.
• Market insights are built from publicly available signals and aggregated platform data, not from your personal data.

We do not sell your personal data. We share it with service providers who process it for us, only as needed for the purposes below:

• Buyers and the public: Your storefront, profile and listings are public. Buyers see your name and the details you publish.
• Advertising partners: When you sign up, first open your dashboard or buy a plan, our advertising tags may send your name, email address, phone number and country to Google and Meta to match ads and measure conversions.
• Authorities and partners: Law enforcement agencies, regulators, courts, banks and payment partners, when the law requires it, on a lawful request, or where needed to prevent fraud or protect buyers.
• Business transfer: A successor business, if Qynko is sold or transferred, under protections equivalent to this policy.
• With your consent: Anyone else, when you ask us to or agree.

Some of our service providers process data outside India, for example in the United States or the European Union. We transfer data only as permitted under Indian law, and our providers are bound by their terms to protect it.

• Strictly necessary: Sign-in sessions and security (Firebase, reCAPTCHA). Qynko does not work without them.
• Preferences: Settings such as theme and language, stored in your browser.
• Analytics: Google Analytics 4 and Microsoft Clarity, which record how pages are used; Clarity masks form inputs.
• Advertising: Google Ads and Meta Pixel, loaded through Google Tag Manager, which measure the results of our ads and may be used to show you our ads on other sites.
• Attribution: Ad-click identifiers and campaign parameters from the link you arrived by, and the Qynko landing page you last viewed (a cookie on qynko.com and its subdomains, kept for 30 days), kept in your browser and saved with your account when you sign up.

This section explains how we handle Instagram data if you use Instagram Automation.

• What we access: Through Meta's official API: your Instagram user ID, username, account type and profile picture; comments on posts you select; the ability to reply to those comments and send direct messages to commenters who use your keywords; and, when you switch on the follow gate, whether a commenter who taps a button in your DM follows your account.
• How we use it: Only to run the automations you configure. We read comments to detect keywords, post the public reply you configured where you enabled it, and send a direct message on your behalf. If your DM has buttons, we record each commenter's taps, whether they were confirmed as a follower and which messages they were sent, so the flow continues where it left off and you can see how many people reached each step. Follow-up messages are sent only within 24 hours of the commenter's own last message or tap, never after, and stop as soon as they reply STOP.
• Opt-outs: When a commenter replies STOP, we record their ID and stop sending them automated messages. The opt-out list is kept while your Qynko account exists, including after you disconnect Instagram, and is deleted when your account deletion is completed.
• Retention: Access tokens are encrypted and cleared when you disconnect or Instagram revokes access; disconnecting also pauses your automations. Comment-processing records and opt-out lists stored under your account are kept until your account deletion is completed. DM conversation records are kept until a data deletion request for that Instagram account reaches us through Meta.
• Revoking access: Disconnect at any time from Settings → Integrations → Instagram → Disconnect, or remove Qynko under Instagram Settings → Apps and Websites. Meta tells us and we disconnect automatically, which clears your access token and pauses your automations.
• Data deletion requests: When a data deletion request is submitted through Meta for an Instagram account, we delete the records in which that account appears as a commenter (processed comments, DM conversations and opt-outs) and, if it is the Instagram account you connected, your access token, integration and automation settings, and we return a confirmation code, as Meta's policies require. Comment-processing records and opt-out lists stored under your account are not deleted by such a request; they are deleted when your account deletion is completed.
• Meta's role: Instagram and the Instagram API are products of Meta Platforms, Inc. Our use of the API is governed by Meta's Platform Terms, and Meta's own practices by Meta's Privacy Policy.

• Data is encrypted in transit using HTTPS/TLS and stored with our cloud providers, who encrypt it at rest.
• Access to personal data is limited to authorised staff who need it for their work.
• We review sensitive actions such as payout changes and withdrawals.
• No system is completely secure. If a personal data breach affects you, we will inform you and the Data Protection Board of India as the law requires.

We keep personal data only as long as we need it for the purposes in this policy or as the law requires:

Under the Digital Personal Data Protection Act, 2023 and other applicable law, you have the right to:

• Information: Get a summary of the personal data we process about you, how we process it, and who we have shared it with.
• Correction and erasure: Have inaccurate or incomplete data corrected or updated, and have data erased when it is no longer needed, subject to the retention periods above.
• Withdraw consent: Withdraw consent you have given, such as for marketing, at any time. This does not affect processing already done, or processing we must do by law or to provide the service.
• Grievance redressal: Complain to our Grievance Officer about how we handle your data.
• Nomination: Nominate another person to exercise your rights if you die or become unable to do so.

If you buy from a creator on Qynko, the creator is the seller and Qynko runs the storefront, checkout and access for them. This section explains how Qynko handles your data as a buyer. The rest of this policy, including Service Providers, Cookies and Similar Technologies, Your Rights and Grievance Officer, applies to you too.

• What we collect: Your name, email address and phone number; what you bought, when, the amount paid, invoices, refunds and support tickets; course progress, session attendance and community activity; and your device and browser details. Card and bank details for payments are handled by our payment partner, Razorpay; we do not receive your full card number. If we refund a buyer or pay out their Qynko balance by bank transfer, we collect the bank account details they give us for that transfer.
• Why we use it: To complete your purchase, give you access, send confirmations, reminders and refund updates by email, WhatsApp and in-app notification, handle refunds and support, prevent fraud, and meet our legal obligations.
• What the creator receives: Your name, email address, phone number and purchase details. Buying adds you to the creator’s contacts, and the creator may send you updates and marketing about their services by email or WhatsApp. The creator is responsible for how they use your details.
• Signing up for updates: If you tap Get updates on a creator’s store page, your name and email address are shared with that creator and added to their contacts on Qynko, with the time you agreed. The creator may email you about their courses, sessions and free resources; to stop, see Opting out below.
• The creator's ad platforms: If the creator you buy from runs ads through Qynko's Managed Ads, a hashed (scrambled) form of your email address or phone number, and the fact that you bought, may be shared with the ad platforms that creator uses, such as Meta, Google or Snapchat, only to measure and improve that creator's ads. To opt out, write to support@qynko.com.
• Course certificates: When you download a course completion certificate, its QR code and certificate ID open a verification page on the creator's storefront. Anyone with the certificate or its ID can open that page and see your name as printed on the certificate, the course, the creator's name, when you bought or enrolled in the course, when the certificate was issued, and whether it is still valid. A refund of the course purchase, or of the bundle you reached the course through, marks the certificate as revoked; a bundle that simply runs out does not. The page shows no contact or payment details and asks search engines not to list it.
• Opting out: To stop a creator’s marketing, contact the creator or write to support@qynko.com. Messages about a purchase you made continue while they are needed.
• How long we keep it: Your account data is kept while your account is active. Purchase, payment, refund and invoice records are kept for 8 years, as the Income-tax Act and GST law require.

Qynko is only for people aged 18 or older. We do not knowingly collect personal data from anyone under 18. If you believe a child has registered, write to privacy@qynko.com and we will delete the account.

• Name: Akshoy Duya
• Designation: Founder
• Email: grievance@qynko.com
• Office address: Procellence Technology, Prime Desk Kolkata, Sporting Club, 1008 Laskarhat Road, Opposite Tagore Park, Kasba, Kolkata, West Bengal 700039, India

We will tell you about material changes by email at least 14 days before they take effect. The "Last updated" date at the top of this page shows the latest version.

• Privacy requests: privacy@qynko.com
• Grievances: grievance@qynko.com
• Support: support@qynko.com
• Operator: Procellence Technology (sole proprietorship; proprietor Mou Das Duya). Office: Prime Desk Kolkata, Sporting Club, 1008 Laskarhat Road, Opposite Tagore Park, Kasba, Kolkata, West Bengal 700039, India. GSTIN 19HKNPD4604R1ZF.